Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/cef491ba-6998-36c3-9897-80eae0b6f79b.roa
File:                     cef491ba-6998-36c3-9897-80eae0b6f79b.roa (raw, json)
Hash identifier:          LobwKr1es/NLYbCxfmRGm+vakqaL36Ve82Smo8eo5EA=
Subject key identifier:   64:86:F2:43:A5:11:8E:D8:55:6D:94:FA:61:65:BE:CE:6A:C7:B5:CD
Certificate issuer:       /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7
Certificate serial:       010D0C9F4328584548081D4C5F7378A6AF6EF080
Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/cef491ba-6998-36c3-9897-80eae0b6f79b.roa
Signing time:             Thu 21 Mar 2024 13:00:33 +0000
ROA not before:           Thu 21 Mar 2024 13:00:33 +0000
ROA not after:            Wed 19 Jun 2024 13:00:33 +0000
asID:                     63199
IP address blocks:        148.153.18.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:48:08:1d:4c:5f:73:78:a6:af:6e:f0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7
        Validity
            Not Before: Mar 21 13:00:33 2024 GMT
            Not After : Jun 19 13:00:33 2024 GMT
        Subject: CN=5b591775-0f86-4508-a2e0-5eafb8050298
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:a7:46:41:2a:02:89:a3:1d:3b:21:b0:23:23:
                    3c:72:94:7f:20:59:c0:55:18:2b:a9:d5:6f:d3:8c:
                    d5:ca:d8:2f:cc:32:b4:91:b1:c2:e5:5e:4a:04:bf:
                    64:19:c3:3d:f6:77:02:22:05:99:7b:4d:c5:d9:86:
                    87:ee:77:d1:ff:09:1b:af:8c:b3:3a:1d:43:68:d6:
                    fc:9b:55:36:85:ad:82:fc:85:81:51:31:5b:fc:6b:
                    b7:06:7d:5b:88:47:07:3a:ec:1c:26:3b:0e:5a:2d:
                    55:48:3f:d2:db:56:d6:a5:e9:bc:7c:af:37:06:fd:
                    22:21:89:61:33:88:0d:0b:9c:51:f1:a1:dd:ca:38:
                    70:a3:74:cf:73:10:30:f6:06:1c:9f:f7:ab:07:0b:
                    fc:b8:ff:62:2b:41:74:48:97:33:2c:e6:d8:6a:35:
                    6a:f7:d8:b6:47:fa:51:19:75:ae:5c:81:3d:2a:7a:
                    ff:66:94:a3:c6:c8:bf:c1:9e:f8:b3:2c:82:a2:b9:
                    22:a9:cc:21:cd:78:06:9a:63:36:06:f6:ad:df:52:
                    5e:2d:81:b3:c1:d0:69:dd:13:31:31:37:e1:a1:cc:
                    46:5d:64:ab:4f:e2:52:0a:ee:d3:b8:eb:c1:5f:bb:
                    ad:4b:f9:00:40:88:e0:34:51:6a:36:ac:cd:2b:8f:
                    dd:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:86:F2:43:A5:11:8E:D8:55:6D:94:FA:61:65:BE:CE:6A:C7:B5:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/cef491ba-6998-36c3-9897-80eae0b6f79b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl

            X509v3 Authority Key Identifier:
                keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.153.18.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:06:17:3a:f8:11:a7:f0:1f:39:ff:89:a6:d0:a1:11:6b:78:
         99:43:f7:a3:9d:5f:db:b4:a1:7b:3b:b0:3a:f3:3f:b8:8c:35:
         cd:87:fb:93:94:25:c9:05:31:6d:1d:58:a3:24:77:90:f2:a1:
         49:8a:35:a1:d5:9d:35:fc:5a:79:04:62:2b:4f:86:ef:17:ec:
         f8:60:3c:d4:09:07:a1:ef:3f:36:5b:cd:4d:32:29:36:34:90:
         b5:4b:e3:3c:e2:06:2c:53:6a:bf:e9:29:95:4e:3e:41:ff:54:
         4b:8c:c4:37:53:52:97:46:b7:93:38:e9:9c:78:7c:5b:d9:ad:
         eb:a0:c2:35:03:3f:00:9b:a4:9e:84:13:a1:ea:c5:f6:fa:23:
         88:16:1b:53:b9:07:93:fa:cc:08:fa:84:58:fb:fb:e4:64:03:
         88:ba:81:cf:09:3b:58:10:e5:ed:78:9d:dc:1a:00:4c:b9:86:
         53:04:9c:6c:7b:3e:56:ba:42:03:f0:6e:23:dc:44:a3:1d:64:
         95:89:ed:2c:22:1b:30:cf:bb:2c:d5:08:c5:73:61:ab:7c:2f:
         a9:e5:8f:07:51:f1:43:de:6a:9d:16:42:26:6e:ff:37:d0:e9:
         7e:7f:da:29:03:c8:e1:c9:26:f3:46:0f:0a:09:0a:5e:ed:cd:
         59:52:01:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:32:40 2024 by rpki-client on console-fra.rpki-client.org